wafw00f

WAF fingerprinting via crafted HTTP probes. Use before content discovery, injection testing, or active scanning to know what protection is in place.

Quick start

# Detect WAF on single target
wafw00f https://target.com

# Try all fingerprints (not just first match)
wafw00f -a https://target.com

# Multiple targets from file
wafw00f -i targets.txt

# Output formats
wafw00f https://target.com -o json -f output.json
wafw00f https://target.com -o csv -f output.csv